Gap note
Web Bot Auth gaps
Web Bot Auth is a gap note assembled on 2026-10-21. It quotes primary pages for settlement asset, spend controls, revocation, protocol composition, license, governance body, and cross-company use. A line that says not documented uses the day that page was read. The note does not rank the listing.
Last verified 2026-10-21
Sources
Web Bot Auth listing · Protocol compatibility · Gaps JSON
| Dimension | Status |
|---|---|
| Settlement asset | Not documented |
| Spend controls | Omitted |
| Revocation | Omitted |
| Protocol composition | Documented |
| License | Mixed |
| Governance body | Documented |
| Cross-company use | Documented |
Settlement asset
Not documented
Not documented as of 2026-10-19. The draft and the Cloudflare documentation used for the listing do not name a settlement asset.
IETF webbotauth working group draft: HTTP Message Signatures for automated traffic · Read 2026-10-19
Spend controls
No checked source for this dimension in this note.
Revocation
No checked source for this dimension in this note.
Protocol composition
Documented
Visa's Trusted Agent Protocol specification says its agent recognition signature is aligned with web-bot-auth.
Visa Trusted Agent Protocol specifications · Read 2026-10-21
The UCP specification defines optional Web Bot Auth interop for key lookup and signatures.
Universal Commerce Protocol specification · Read 2026-10-21
License
Documented
Apache-2.0 for the Cloudflare repository. The GitHub license API reported this SPDX identifier on 2026-10-21.
GitHub repository cloudflare/web-bot-auth · Read 2026-10-21
Not documented
Not documented as of 2026-10-19. This cell does not state a separate license for the IETF draft text.
IETF webbotauth working group draft: HTTP Message Signatures for automated traffic · Read 2026-10-19
Governance body
Documented
The signature rules are an IETF working group draft.
IETF webbotauth working group draft: HTTP Message Signatures for automated traffic · Read 2026-10-19
Cross-company use
Documented
Visa's Trusted Agent Protocol specification says its agent recognition signature is aligned with web-bot-auth.
Visa Trusted Agent Protocol specifications · Read 2026-10-21
Questions
- What does not documented mean?
- Not documented means the cited page does not state the fact. The line names that page and the day it was read. It is not a claim that the fact is false.
- What does omitted mean?
- Omitted means this note has no checked source for that dimension. The dimension was left out rather than filled in.
- Does the index rank these products?
- No. The table can be sorted by name, by dimension status, or by checked date. Sort order is not a score.
- Where is the machine readable file?
- GET /data/gaps.json. The file includes every note, the cited sources, and the read dates.